When I google sometime like lets say "boy suspenders" and items show up in shopping. I click on it to go view it on the page, for instance etsy.com and I get this error (see screenshot). How do I stop this from happening? It does this in safari & google chrome, also no matter what internet I'm using (home, work, mobile).
MacBook Pro, OS X Yosemite (10.10.1)
You have a redirect virus.How to remove Adware?
I actually downloaded Adware Medic. Will that not remove this?
Also, I just tried to follow the instructions. I can't find any of the following files when I highlight, control click, "reveal in finder"...
Triple-click anywhere in the line below on this page to select it:
/Library/Application Support/VSearch
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchAgents/com.vsearch.agent.plist /Library/LaunchDaemons/com.vsearch.daemon.plist /Library/LaunchDaemons/com.vsearch.helper.plist /Library/LaunchDaemons/Jack.plist /Library/PrivilegedHelperTools/Jack /System/Library/Frameworks/VSearch.framework
I have never used that one, but give it a try. Also, in that link I gave you it showed how to look in safari and google chrome to see if you have any unwanted extensions. Did you try that?
Laceycowgurl wrote:
I actually downloaded Adware Medic. Will that not remove this?
It should, although there are no guarantees. If this is being caused by new, previously-unseen adware or by something other than adware, AdwareMedic won't help. This is an odd problem to be caused by adware, so I'm concerned that it may not work, but give it a try anyway.
If it doesn't work, check your DNS server setting according to these directions:
http://www.adwaremedic.com/kb/baddns.php
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)
Ok, I did the DNS reset and verified any extensions in Safari and Google Chrome (only browsers I have) and I didn't have any extensions. Any other ideas?
I remember that my daughters macbook, running Yosemite had this problem. She got it because she downloads kids games. The only thing I can remember about it was that she had two file in her applications folder. One was called mac install. Can't remember the other. Seems like it was some off brand utility. It also changed the search preference page in her browser. I downloaded cleanmymac to get rid of it. That app has an uninstall feature. I would open it and drag the folder or app I wanted to delete into it and open it. That would show me all the file and where they were. Then I would delete then manually. That is because cleanmymac , the free version will only let you delete small files. Some people on this site don't like cleanmymac, but it works for me. I did have to go in her browser under preferences and change her search engine. I'm still looking around to see if I can find what all the app are that cause this.
Laceycowgurl wrote:
Ok, I did the DNS reset and verified any extensions in Safari and Google Chrome (only browsers I have) and I didn't have any extensions. Any other ideas?
Can you use AdwareMedic to generate a system snapshot? (Choose Take System Snapshot from the Scanner menu in AdwareMedic.) You can either copy this report and post it here or submit it to me privately using the "Submit to The Safe Mac" button. I'll take a look and let you know what I see.
Also, just to clarify: this is only happening on one Mac, and it happens anywhere, no matter what network you're on. It also only happens when clicking ads at the top of a Google search. Is that correct? How often does it happen? Is it something you can cause to happen pretty easily, or does it just pop up randomly now and then?
my ginger wrote:
she had two file in her applications folder. One was called mac install. [...] I downloaded cleanmymac to get rid of it.
Sounds like the InstallMac (aka Genieo) adware. CleanMyMac definitely will not fix this. It may remove some, or perhaps even all, of the visible symptoms, but you can bet you still have components of Genieo installed somewhere. See:
http://www.thesafemac.com/arg-genieo
CleanMyMac definitely should be avoided. Macs do not need the "cleaning" that it offers, and the uninstall feature it has is not at all reliable. In addition, the folks who make it seem to think it's okay to have it installed alongside adware, piggybacking in an installer that you were tricked into thinking you needed. This doesn't happen as often with CleanMyMac as it does with even worse programs, like MacKeeper, but it does happen.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)
Perhaps your right. It was install mac. The app was never opened and it has not reoccurred. Now she has another app called conduit or conectex or something like that I have to get rid of. this does have a redirect in it. She gets these downloading kids games. I know this because her safari search engine is set to google, but it opens in yahoo. I may have to install an app for adware or something to stop her from doing this. I know they are piggy backing with her downloads.
Yes, very easy to duplicate as it happens all the time on any network. Screenshot is what I googled "macbook" and I click on anything where it says "shop for mac computer on google" then it goes right to the "googleadservices.com error" that is in my screenshot on the original post. I did have the genio folder and removed it via Adware medic. Thanks for your help! I'll try to send something via adware medic. I tried before but couldn't get it to work right. I'll try your instructions.
also, it is only my computer. My husband also has a mac with no issues. He actually is a high level IT guy, but is new to macs this year and travels a lot for work. I'm trying to get this fixed before I bug him with it. lol
I was hoping the issue was that dang Genio folder, but alas it's gone but the issue persists. ugh!
I found this link which might help. http://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/v1 02043536_EndUserProfile_enIn researching this on the web, I find a lot of info for it . But it's mostly for windows. But they all seem to agree that if comes for clicking on something on a web page or downloading something. Getting it out of the browser by deleting it or changing the search preferences doesn't seem to help. since you already checked your DNS settings., this is all I can find that might help. The link I put in goes to norton site ,but you need to use the support link ,then threat removal, then scroll down to FAQ and click on (I am redirected to different websites).
Can you use AdwareMedic to generate a system snapshot (choose Take System Snapshot from the Scanner menu)? Then either post that snapshot here, or use the "Submit to The Safe Mac" to send it to me directly.
my ginger wrote:
I may have to install an app for adware or something to stop her from doing this. I know they are piggy backing with her downloads.
Unfortunately, there really isn't anything you can install to stop this. Anti-virus software has very spotty detection of adware, and thus can't be relied on. Ad blockers won't prevent infection by adware, nor are they an effective solution for removing the effects of adware. The only thing that can protect her is to change her online habits... she needs to be more careful about what she's downloading, and from where. See my Mac Malware Guide for more information on this.
If she's using a Mac that is shared with other members of the family, be sure to set her up with her own user account on that Mac (in System Preferences -> Users & Groups). Make sure that her user is not allowed to administer the computer, and then make sure all other accounts (especially any admin accounts) are locked down with a password she can't guess. That way, at least if she downloads something bad, it will only affect her account and not the whole machine.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)
Googleadservice.com error?
